Legal claims defining the scope of protection, as filed with the USPTO.
1. A computer-implemented system for managing a federated browser security in an enterprise environment, the computer-implemented system comprising: one or more hardware processors; and a memory coupled to the one or more hardware processors, wherein the memory comprises a browser agent subsystem in form of programmable instructions executable by the one or more hardware processors, wherein the browser agent subsystem comprises: an activity monitoring subsystem configured to monitor at least one of one or more user browsing activities and one or more enterprise contexts on a local web browser hosted on a user device associated with a user and one or more device attributes corresponding to the user device; an identifier detecting subsystem configured to detect a pre-defined enterprise identifier corresponding to an enterprise environment, from a universal resource locator (URL) address of a web page, based on the monitored at least one of one or more user browsing activities; the identifier detecting subsystem configured to detect the pre-defined enterprise identifier corresponding to the enterprise environment, from one or more user login credentials input on the local web browser hosted on the user device, based on the monitored at least one of one or more user browsing activities; a secure browsing subsystem configured to initiate, in response to the detected pre-defined enterprise identifier, an execution of a secure web browser hosted on at least one of the user device and a virtual private cloud associated with the enterprise environment; a data routing subsystem configured to route through the secure browsing subsystem, in response to initiating the execution of the secure web browser, at least one of a webpage URL, a login web page URL, the user login credentials, and information associated with a login webpage corresponding to the web page URL, the login web page URL, from the local web browser to the secure web browser; and a federated browser security management subsystem configured to manage, in response to routing at least one of the web page URL, the login web page URL, the user login credentials, and the information associated with the login webpage, a list of the enterprise URL, a list of federated identity of the user in the secure web browser, for managing a federated browser security in the enterprise environment, wherein the federated browser security is managed for visibility and control of an enterprise security in the enterprise environment.
2. The computer-implemented system of claim 1, wherein the browser agent subsystem further comprises a malicious activity monitoring subsystem configured to: monitor one or more malicious activities associated with the one or more user browsing activities on the local web browser, wherein the one or more malicious activities are monitored by inspecting information associated with network traffic corresponding to the enterprise environment; and route the one or more malicious activities to the secure web browser, based on the monitored one or more malicious activities.
3. The computer-implemented system of claim 2, wherein the one or more malicious activities comprise at least one of a phishing activity, an identity theft activity, and a data leakage activity.
4. The computer-implemented system of claim 1, wherein the data routing subsystem is further configured to: detect an access of, from the local web browser, one or more cloud-based browsers associated with a cloud in the enterprise environment, based on the one or more user browsing activities, wherein the one or more cloud-based browsers corresponds to the secure web browser; receive, in response to detecting the access, a continuing image of the one or more cloud-based browsers; and render the received continuing image of the one or more cloud-based browsers, in the local web browser, wherein the continuing image comprises a stream of data corresponding to a real-time view of the one or more cloud-based browsers running in the cloud.
5. The computer-implemented system of claim 1, wherein the secure browsing subsystem is further configured to secure an entire browsing session in the enterprise environment by detecting a malware and a data leakage in the user device and the enterprise environment.
6. The computer-implemented system of claim 1, wherein the one or more user browsing activities are comprised of at least one of an enterprise universal resource locator (URL) access activity, an enterprise login activity, an enterprise print activity, and an enterprise file download activity.
7. The computer-implemented system of claim 1, wherein the one or more device attributes are comprised of at least one of one or more attributes of an installation of a mobile device management (MDM) application, attributes of an installation of an endpoint detection and response (EDR) application, and attributes of an installation of an anti-virus application.
8. The computer-implemented system of claim 1, wherein the one or more enterprise contexts are comprised of at least one of an identity used in one or more login pages of the web page, the URL address of a software-as-a-service (SaaS) application, content of the web page, an identity of the user, a user name of the user, and a type of file to be downloaded or printed.
9. The computer-implemented system of claim 1, wherein the pre-defined enterprise identifier is comprised of at least one of a pre-defined hostname, a pre-defined username, and a pre-defined domain name.
10. The computer-implemented system of claim 1, wherein the enterprise environment is comprised of at least one of one or more enterprise-based applications, one or more enterprise-based data centers, one or more enterprise-based clouds, one or more enterprise-based software-as-a-service (SaaS) applications, and an enterprise-based Internet.
11. The computer-implemented system of claim 1, wherein the virtual private cloud corresponds to an isolated environment in a cloud associated with the enterprise environment.
12. The computer-implemented system of claim 1, wherein the secure web browser hosted on the virtual private cloud is accessed from the local web browser.
13. A computer-implemented method for managing a federated browser security in an enterprise environment, the computer-implemented method comprising: monitoring, by one or more hardware processors, at least one of one or more user browsing activities, and one or more enterprise contexts on a local web browser hosted on a user device associated with a user and one or more device attributes corresponding to the user device, detecting, by the one or more hardware processors, a pre-defined enterprise identifier corresponding to an enterprise environment, from a universal resource locator (URL) address of a web page, based on the monitored at least one of one or more user browsing activities, wherein the pre-defined enterprise identifier is comprised of at least one of a pre-defined hostname, a pre-defined username, and a pre-defined domain name; detecting, by the one or more hardware processors, the pre-defined enterprise identifier corresponding to the enterprise environment, from one or more user login credentials input on the local web browser hosted on the user device, based on the monitored at least one of the one or more user browsing activities; initiating, by the one or more hardware processors, in response to the detected pre-defined enterprise identifier, an execution of a secure web browser hosted on at least one of the user device and a virtual private cloud associated with the enterprise environment; routing, by the one or more hardware processors, through the secure browsing subsystem, in response to initiating the execution of the secure web browser, at least one of a webpage URL, a login web page URL, the user login credentials, and information associated with a login webpage corresponding to the web page URL, the login web page URL, from the local web browser to the secure web browser; and managing, by the one or more hardware processors, in response to routing at least one of the webpage URL, the login web page URL, the user login credentials, and the information associated with the login webpage, a list of the enterprise URL, a list federated identity of the user in the secure web browser, for managing a federated browser security in the enterprise environment, wherein the federated browser security is managed for visibility and control of an enterprise security in the enterprise environment.
14. The computer-implemented method of claim 13 further comprising: monitoring, by the one or more hardware processors, one or more malicious activities associated with the one or more user browsing activities on the local web browser, wherein the one or more malicious activities are monitored by inspecting information associated with network traffic corresponding to the enterprise environment, wherein the one or more malicious activities comprise at least one of a phishing activity, an identity theft activity, and a data leakage activity; and routing, by the one or more hardware processors, the one or more malicious activities to the secure web browser, based on the monitored one or more malicious activities.
15. The computer-implemented method of claim 13 further comprising: detecting, by the one or more hardware processors, an access of, from the local web browser, one or more cloud-based browsers associated with a cloud in the enterprise environment, based on the one or more user browsing activities, wherein the one or more cloud-based browsers corresponds to the secure web browser; receiving, by the one or more hardware processors, in response to detecting the access, a continuing image of the one or more cloud-based browsers; and rendering, by the one or more hardware processors, the received continuing image of the one or more cloud-based browsers, in the local web browser, wherein the continuing image comprises a stream of data corresponding to a real-time view of the one or more cloud-based browsers running in the cloud.
16. The computer-implemented method of claim 13 further comprising securing, by the one or more hardware processors, an entire browsing session in the enterprise environment by detecting a malware and a data leakage in the user device and the enterprise environment.
17. The computer-implemented method of claim 13, wherein the one or more user browsing activities are comprised of at least one of an enterprise universal resource locator (URL) access activity, an enterprise login activity, an enterprise print activity, and an enterprise file download activity, and wherein the one or more device attributes are comprised of at least one of one or more attributes of an installation of a mobile device management (MDM) application, attributes of an installation of an endpoint detection and response (EDR) application, and attributes of an installation of an anti-virus application.
18. The computer-implemented method of claim 13, wherein the one or more enterprise contexts are comprised of at least one of an identity used in one or more login pages of the web page, the URL address of a software-as-a-service (SaaS) application, content of the web page, an identity of the user, a user name of the user, and a type of file to be downloaded or printed, and wherein the enterprise environment is comprised of at least one of one or more enterprise-based applications, one or more enterprise-based data centers, one or more enterprise-based clouds, one or more enterprise-based software-as-a-service (SaaS) applications, and an enterprise-based Internet.
19. The computer-implemented method of claim 13, wherein the virtual private cloud corresponds to an isolated environment in a cloud associated with the enterprise environment, and wherein the secure web browser hosted on the virtual private cloud is accessed from the local web browser.
20. A non-transitory computer-readable storage medium having programmable instructions stored therein, that when executed by one or more hardware processors, cause the one or more hardware processors to: monitor at least one of one or more user browsing activities and one or more enterprise contexts on a local web browser hosted on a user device associated with a user and one or more device attributes corresponding to the user device, detect a pre-defined enterprise identifier corresponding to an enterprise environment, from at least one of a universal resource locator (URL) address of a web page and one or more user login credentials input on the local web browser hosted on the user device, based on the monitored at least one of one or more user browsing activities; detect the pre-defined enterprise identifier corresponding to the enterprise environment, from one or more user login credentials input on the local web browser hosted on the user device, based on the monitored at least one of one or more user browsing activities; initiate, in response to the detected pre-defined enterprise identifier, an execution of a secure web browser hosted on at least one of the user device and a virtual private cloud associated with the enterprise environment; route through the secure browsing subsystem, in response to initiating the execution of the secure web browser, at least one of a web page URL, a login web page URL, the user login credentials, and information associated with a login webpage corresponding to the web page URL, login web page URL, from the local web browser to the secure web browser; and manage, in response to routing at least one of the webpage URL, the login web page URL, the user login credentials, and the information associated with the login webpage, a list of the enterprise URL, a list of federated identity of the user in the secure web browser, for managing a federated browser security in the enterprise environment, wherein the federated browser security is managed for visibility and control of an enterprise security in the enterprise environment.
Unknown
April 15, 2025
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.